This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json) Hash identifier: 5nvkZZUEBTdBiN+bK1Fq4SU6tZEW3oxnMuKY2AbugkI= Subject key identifier: 99:B1:0D:38:26:22:12:69:E9:77:DB:91:10:7E:A4:E5:36:1C:41:D6 Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc Certificate serial: 019AF23F5C04D08FB2AA427185687C651984 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft Manifest number: 08B9 Signing time: Sat 06 Dec 2025 06:00:29 +0000 Manifest this update: Sat 06 Dec 2025 06:00:29 +0000 Manifest next update: Sun 07 Dec 2025 06:00:29 +0000 Files and hashes: 1: IkNC-TUcCoYBxsQeLh6_eg3WO0Y.roa (hash: FzBKtoxKdAzZGhoYpGryWwHPZ5WZpqNHKyLplIOiPAU=) 2: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: gn7U9WkyeyMt+t+CleFJH0AUX9ht4grMGlOJSZacBRg=) 3: _5WIvJfKyXPt7q3eDEUV4dqzXLc.roa (hash: WY6kQSCLPQqO6U8inB26YKVMLyQQktJDfS2xbDWHzWw=) 4: uDI0D6qr7-usCDL-fgv2aBY_bUU.roa (hash: H5Mm89vS+5YR+a0XeYRvNkRodKD27aIsyfCqNBxXQhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:5c:04:d0:8f:b2:aa:42:71:85:68:7c:65:19:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc Validity Not Before: Dec 6 06:00:29 2025 GMT Not After : Dec 7 06:00:29 2025 GMT Subject: CN=99b10d3826221269e977db91107ea4e5361c41d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:70:ba:8e:66:71:eb:51:dd:ac:cf:62:45:48: ae:07:44:c6:11:78:b2:6d:f4:9c:5f:ea:4d:ec:bf: 20:93:9b:3b:2e:8a:1a:f1:f5:a5:05:b9:cf:a4:56: c1:3e:37:da:29:e2:92:40:18:d7:9a:8a:6f:d1:f7: e1:7f:72:2f:18:8f:1d:4d:70:09:89:37:16:e2:e4: 02:82:3d:dd:df:64:35:da:26:eb:5c:15:93:c2:97: 80:d6:7a:5b:8a:77:a8:df:ca:5a:57:eb:3c:a1:ea: 4e:4b:f9:38:d8:8b:0f:f8:a5:97:cf:72:50:03:7d: 20:ed:6e:dc:a6:11:4d:0f:2d:d3:4a:d8:51:7a:5e: b3:31:36:3f:8d:ed:78:7c:c5:ee:b2:b5:9a:e6:3d: f1:57:90:49:50:4c:ff:e2:02:ce:cf:87:90:4e:f3: 85:a3:7f:cd:0c:12:5d:c9:70:99:8a:f9:0d:7a:1a: 96:07:7a:f4:90:70:2f:ee:93:5e:5b:9d:6a:af:62: 98:8f:9b:35:e3:61:56:88:66:c0:1c:ed:4a:7e:b4: 1b:00:ee:e6:d7:02:16:3f:39:24:94:50:13:83:4d: 0e:91:61:f3:25:f8:15:b6:55:67:e8:d9:00:a2:a4: c7:5b:44:98:9a:ed:67:c7:8e:20:26:22:7d:ec:e3: 52:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B1:0D:38:26:22:12:69:E9:77:DB:91:10:7E:A4:E5:36:1C:41:D6 X509v3 Authority Key Identifier: keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:3d:31:3f:3f:31:1c:08:36:15:b6:bb:3c:5e:93:d3:6e:41: dc:c6:e9:11:4b:57:a7:30:a6:05:56:aa:59:cb:85:c3:58:49: 88:8d:a7:12:98:52:12:64:8c:ff:e3:e8:23:fb:db:85:3e:34: 3f:0e:47:bb:70:50:d6:ce:fd:bf:32:7f:9a:6e:98:ba:90:b8: 1e:97:18:8c:c8:f2:2e:c8:91:f4:fb:c2:c6:cb:42:4a:ec:46: d0:51:6c:96:50:22:e8:aa:5c:00:66:eb:a6:3b:71:19:a9:e8: 7b:12:36:be:f3:c0:0e:66:e8:d6:16:47:9d:d5:ac:f8:75:41: b1:50:96:00:0f:ac:a7:3b:c9:9e:c9:ca:78:60:b5:fd:c0:88: 1f:8b:cb:b0:d4:a0:0b:09:03:1d:74:cc:61:7d:f9:5e:85:69: 97:5a:40:93:c8:ad:70:74:25:d1:8e:b0:4a:7b:5e:79:3c:b5: 34:78:cb:c3:70:a9:a7:6d:94:bd:52:b3:11:f3:f6:c6:26:f7: c1:7c:e1:55:77:73:11:a2:d1:f5:38:b9:b5:78:a1:44:9d:79: 38:a5:fe:58:5c:15:95:ef:09:00:a6:3b:2c:ec:d9:88:ec:55: 96:49:d6:96:a2:0b:23:29:03:01:62:ae:5a:17:fc:52:ca:00: dd:1a:8a:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP1wE0I+yqkJxhWh8ZRmEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGNjNTJhMDcwN2NjMzQwYWM5YzdmNmU5MDI4YjY0Yjcw MjY3YmMwHhcNMjUxMjA2MDYwMDI5WhcNMjUxMjA3MDYwMDI5WjAzMTEwLwYDVQQD Eyg5OWIxMGQzODI2MjIxMjY5ZTk3N2RiOTExMDdlYTRlNTM2MWM0MWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3C6jmZx61HdrM9iRUiuB0TGEXiy bfScX+pN7L8gk5s7Looa8fWlBbnPpFbBPjfaKeKSQBjXmopv0ffhf3IvGI8dTXAJ iTcW4uQCgj3d32Q12ibrXBWTwpeA1npbineo38paV+s8oepOS/k42IsP+KWXz3JQ A30g7W7cphFNDy3TSthRel6zMTY/je14fMXusrWa5j3xV5BJUEz/4gLOz4eQTvOF o3/NDBJdyXCZivkNehqWB3r0kHAv7pNeW51qr2KYj5s142FWiGbAHO1KfrQbAO7m 1wIWPzkklFATg00OkWHzJfgVtlVn6NkAoqTHW0SYmu1nx44gJiJ97ONStQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmxDTgmIhJp6XfbkRB+pOU2HEHWMB8GA1UdIwQY MBaAFEWMxSoHB8w0CsnH9ukCi2S3Ame8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUll6RktnY0h6RFFLeWNmMjZRS0xaTGNDWjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81YTdkMmYtNTE2OC00NzIwLThjZTAt NzA0MTQ5NjE5YzQ2LzEvUll6RktnY0h6RFFLeWNmMjZRS0xaTGNDWjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81YTdkMmYtNTE2OC00NzIwLThjZTAtNzA0MTQ5NjE5YzQ2 LzEvUll6RktnY0h6RFFLeWNmMjZRS0xaTGNDWjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWz0xPz8x HAg2Fba7PF6T025B3MbpEUtXpzCmBVaqWcuFw1hJiI2nEphSEmSM/+PoI/vbhT40 Pw5Hu3BQ1s79vzJ/mm6YupC4HpcYjMjyLsiR9PvCxstCSuxG0FFsllAi6KpcAGbr pjtxGanoexI2vvPADmbo1hZHndWs+HVBsVCWAA+spzvJnsnKeGC1/cCIH4vLsNSg CwkDHXTMYX35XoVpl1pAk8itcHQl0Y6wSnteeTy1NHjLw3Cpp22UvVKzEfP2xib3 wXzhVXdzEaLR9Ti5tXihRJ15OKX+WFwVle8JAKY7LOzZiOxVlknWlqILIykDAWKu Whf8UsoA3RqKjw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:11 2025 by rpki-client